feat: upload for wifey

2026-02-09 12:29:19 -08:00 · 2025-12-04 01:56:29 -08:00 · 2025-12-04 01:56:29 -08:00 · cf9ec64e69
commit cf9ec64e69
parent 8585f1749f
20 changed files with 1238 additions and 771 deletions
--- a/nixos/servers/mail/mail.nix
+++ b/nixos/servers/mail/mail.nix
@ -1,2 +1,31 @@
-_: {
+{config, ...}: {
+  sops.secrets.kat-password = {
+    sopsFile = ./secrets.yaml;
+  };
+  mailserver = {
+    enable = true;
+    stateVersion = 3;
+    fqdn = "rinnosuke.inskip.me";
+    domains = ["dork.dev"];
+
+    # A list of all login accounts. To create the password hashes, use
+    # nix-shell -p mkpasswd --run 'mkpasswd -sm bcrypt'
+    loginAccounts = {
+      "kat@dork.dev" = {
+        hashedPasswordFile = config.sops.secrets.kat-password.path;
+        aliases = [
+          "@dork.dev"
+        ];
+        catchAll = [
+          "dork.dev"
+        ];
+      };
+    };
+
+    # Use Let's Encrypt certificates. Note that this needs to set up a stripped
+    # down nginx and opens port 80.
+    certificateScheme = "acme-nginx";
+  };
+  security.acme.acceptTerms = true;
+  security.acme.defaults.email = "security@inskip.me";
 }
--- a/nixos/servers/mail/secrets.yaml
+++ b/nixos/servers/mail/secrets.yaml
@ -0,0 +1,128 @@
+kat-password: ENC[AES256_GCM,data:L4j1gD7OPIzbJ50T6ZhPX3izEq1HA96Eyp1UqiXx32OJzEPuey39BvIaCXWkWNt1maoA/bY5D/U0DRRD,iv:wWlMhuDvHTwrcARg5edi2izCVlEP765wEsWbNkkO5EM=,tag:cL6IZFyjZT8EMvDAck9T6A==,type:str]
+sops:
+    shamir_threshold: 1
+    age:
+        - recipient: age1n4kdchmkk3rfkaknxhveqr2ftprdpgwckutt23y6u8639lazzuks77tgav
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNWXJobVhxVUdMTThCVUc4
+            NEF0SUoxNkhtRU90VHpjanZUZGk0d1A2N1djCm5kTXpSdzlkYkV0VHdYaGFLQThC
+            QnZDdXZ2MmxaaVRPYThDMTJPKzg3bE0KLS0tIGhnbzhUdzlLellQZ2g3enY2R1Vl
+            ZUlPWkJsSVlLNEtxV2JzaTFCVWs4djQK4mMDLXTYoEnfCG/1QFEtKRw1TMy6H3zU
+            RnASNkT2YMmCqkb0GOuLYPVkkOWLHoGsBOVpGkmi/k/l1NlKrSU83A==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1cnu37d5fqyahh9vvc4hj6z6k8ur9ksuefln7sr6g3emmn927eutqxdawuh
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMaFN3NVlDL2RoUzJ5Q0ZW
+            ci9ORzZZNEI2OEZ2aXM2MzdnbDVUYmM3YUhJCkFvTVVJTlhZa0RUK3AyajBJV21j
+            VTgxM2VWOEhGY3pSM2tVeVdYVlEwZTgKLS0tIERGaDhuakxNWjN2cDhBWS9pbGZr
+            L3Q4ZFJ4NVRXMzZIV1RSL1pMc3RpRDAKDx5hMmHGdqUEfCSYaJLTdkuWlgx/AwAo
+            scwMkcYDeyZ4up6Ntl4ZM3hLqRdNNzWZ2UoXX+/p93AoZlRmsu+bqA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1a0m73qr8hhuz8xemv4vymf4wmpghm2hst8wgrn3pn65ext5mf4ksk0vsdm
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2M3U3VHdMUWZYc1VaV21u
+            S2FXN0d5V0F5WWlPeVhYZm5nVExtb081UVEwCnVFYnpOTkpTRXhTSG03RjExL2tZ
+            TVRwOUhkSzNLSVJ0S1lRSnY1aXVEZEkKLS0tIENjY0hvRWtYMGM3YWRJSTNHNXh5
+            cDJlMW5pN0lOM1RIbU8yaXViT1FybEEKuPryiHmuSolFcdF2pdf9UfqSYYEGNDkA
+            Q3p9iCSwMIQaVWKQHvk2oaEphY3FwxjcI/sYfDinscBjMQPZRwYdLw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age18hpxz0ghvswv9k30cle73prvnzrsuczqh87jjdk9fl50j3ddndmq9xae0n
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmdDhFMk9oOCticTV6NWZL
+            dG8vYVZRaldlMy9mYlRhemx4aWFkZVZldENVCkJ5YWlraDFuMmIxNWltVDloaWFB
+            TjExaWRBYTZhRmFpVjk4SEdlVEZPcVUKLS0tIGl5YzlEMlBmelZKdHVBNHlBL0Nz
+            TXJObDhUQXJJa2wyV3l6ZGJyQlV0NFEKitl0XyQkAkGp0r/i1xKukfVKrmEwtttD
+            jjxa4qYRdCC7gC+nPAhMfwI/C7s7dsOMRsQUHRhqLigl3gyCjvTaJQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1xgy03g3vjydsxcl0qpdgm8rahjcjq95ucxfwlgr22zwjx3p7jf2s9jk6u5
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4Yk41TnQwZzcwZldWTE4w
+            R0h3MzJrT1NZZUNnRWFiMnNnOWh5UlB0QWtjCjZPVnhNdkdONkEvaytXWi94c3Fi
+            aGRML0ZENjFhOGRHVVNQcERlcWI0K0UKLS0tIFM1aWJrWnM3NDhDVjJiR3p0czUv
+            a3BOYXF3UE1qQWsrTlhOc3RXVXE5ODgKi9jhHeRw45+K69CVunmFylntnrpEgYVv
+            6G8Hlv9IOK4ACjpArqtIiZ6jetWI1zAaYHiBYtguw/H8UIFYwZcRLg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1fv5dafs4n3r5n83qm2hfz7xmnflsz0xf9r3saralrptpgf8mvuxq4t8k3u
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuTEdCN08zazlISkczL3FV
+            Z25WemM4WVM4clFCQ2FrM3IxZEVEdDRURW1jClRGSW1LU1FHRXMxMGVYNmMvc3g3
+            cG5hNFh2QVFvbUQwd3V3QTE2TkxGZzAKLS0tIDZNR0lvcXB4R215SlRWT09jUm9J
+            OHdHUkNsMTZQa0I1WXhTL0NzSERRWGcKEColN8B1Ys4YR7km2Lao+uIFUFugIH19
+            B/q/tlTRkiwG/gdDa7Zy/T9H2jch0ug5H2S3iXVKV/eHFAcldoCMOQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age120530yclr75k6nrzp6k5jjftj8j4q9v3533guupzk4ct86mjxszqg9e5t5
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4L1FOYStQWTI2Q1Jua2lW
+            UkdEVnVrN3JrOGoydHZqUmlzTjFIQVhxQnlrCnVmM3o3SmczRGQ3cEFkcm02b0Fq
+            SmU2WEFGTGZBTG1NTFFxZDF0d1p4RzgKLS0tIExpMVVMRlpyaUxFVWxzZDZ1SXl4
+            SjR2ck9BOXFpS3hBUHJlN1FWeGRYcFEK/QuQbxJk0umDvsEZ+mSG9rkLc50dhUFv
+            IHk0BDRc/j+RfWdHXw1MNsjrwf3kWlr3qVHW/AACi/oDIoueb6gSoQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1rt0ngkum32wt6l2wnyr40hmwd9ulmzqfarg5vk62zqp0uvj4lyuqd2atgq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHSzQvTUhBbzE5UlJrS0NQ
+            OThKRmFYQndxc0pDVWdiM3lHMHRLMHF4VlIwCnhlM2MvQ2JJRERRRmpKRW1WUGRY
+            dUtCSXZmK3V4elh0MXI3ZGtmWUNia2MKLS0tIEx0VzhkaWJpZVhwM0dNZTUzcngx
+            V2JpeUlIQlIzZW1BVUM3Q3FRWHNyeFkKZy9/XP4OoXmh+/g2pnKNm8ZK73iQxMYb
+            Pmm47vfqBcwrk+q2K3QBQXeMQVUd2RmMX1od/ttNC/mRaqo48kAKsA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1c4atxfp05u7zm875s6q8p82ve96rqqpq9smktxlur8pk2yc3qvgql46dp9
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKQXBpTktYTk1PMDFjTFVi
+            aGl2clZpU2R5TTUwUVh1Mld3YUpnUVNxNGlzClpWdlptSTlEMUwraXY0RzBTOTJ5
+            bGtZV1dDTThXSFI5TGc0M2M4WmJXU0EKLS0tIHE0RGR1dFJkWjJLaFBvdW1neUhK
+            NjdvdTduM3dPWnd6NTIvS0hkRFd6MzAKJdxjO2eDkbriitwdRGF3V9ZvC3J+48+b
+            WN3DuFDoMKV9JZoAr+6FSsbzwBb5bhX6qNmsYaJWt/jkHC4I95yHWA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1rjldv3fn3q686647exmcukthr32gmp6s3axs0lhyenvru9ajp9rs24ukvz
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6ODJhb3NtSHVQNXhNWkxP
+            UUVqdEE3UXNMNktIeVdyaU1QenNHbVRmVlRZCkFsN09aUFZ6eDJVYmtMZmN4SFBE
+            bjRCb3c4cUJGZTBtUHVzWUJheTByTHMKLS0tICt5Yk9oaDR4OXRzZnV4VkRaWlVz
+            amJCRnlTRzY4ejNnR3puM05xU2tGTHMKukT3QTpEYxheIY3reuKiw6gw9tdBIxNv
+            Doxmxgen/Z3L5sZbRNf4HMyL8De1HopgBm9mkElNlWWTkyk+wf1Nuw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1p9v6xaujkdat2tsc2mc4gxpg9hjr4suvwryuat95z2c53xhsyfxq0gf594
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmcTNBdVZjVkt0YXVQODJI
+            K2VVeGR0elc1Um5GcFdPZTl4UVRsNS9BQmtFCnNDbVY2TkpIVzRCNjBxbWVqLzEr
+            aHNxTjFLTlJMeEFEcEpvVmtrc2hNNE0KLS0tIFVzKzBhbXc2NXR5SXJIcHpvWFRO
+            d0o2U1ZRb2xvWm1aMDM2ZGk4WWFPUWcKGxjAWVEUF4EngwwY5vYdEfa4ceh95TIf
+            3spSMNe/xW70f94nl7YFzSjPjXG+TXqvuTU3BiBLYYfv8fNsrpZCcg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-12-04T09:33:56Z"
+    mac: ENC[AES256_GCM,data:/p206tmUtOuEJNWd9d02wiK5HCfttpA9ennTavNW97laXDEMVsVkgMV89rdpplX+NZAYn1xLXwhUu9Ruz9M8yMx8J0ziepDkrcHQNqBxoRWtmMbfEyk/Lb98BJk8T6SAR9tvFwf+t0OPfO2bpV6h6jTrR11BFDNiZFkIezn3/Rk=,iv:ob0w/w5NwlkwrxEU2shgm9mhA+NQAW72Px4i/GHGnfs=,tag:3y3vQGDWu9h20aKq1nGdBA==,type:str]
+    pgp:
+        - created_at: "2025-12-04T09:33:39Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA82M54yws73UARAAuB2Byq1UieMqwSlOqpGeY740YSt+BvKCqMx+Hq8PoguB
+            T9H+7elDIBAW3ND/RcTSLErEmOHV8jmilpdWvDVxcUudma25ugCGgbKdOo+SryBA
+            c5kCA5X7DCykgdsLvqGBxOFbeGT0+HDn3Ai8+Kq52xvCGShm/RGeYiZlku6lQbrg
+            S6QCOghHqqBC+DX3iKaO5+e0hNCedACYBbGC6n1xhT6PY3ukqHBIcDgLnuHcuA2v
+            BvRjFEExmG+o0758L3FOmr+4TyxW0wtv4g53b3HHk6C2Pfx52A/qwVxa8fSgsf2v
+            mNIYn98Sst3RzL0FxUtINEFl4ISmU+lwYxVhy/HKYWKRjTF/xL0Pv7NRLK2xXJnf
+            vW+H66lMKOF1fW/S0hapRnE2sVIm6s0Ia4Dl4GblveWJLU+5ooHYIF5nkueIvNao
+            vDJ9eCzD8p4oaDioS3mej6LWENYOjWm6GEKbyPLeVi5MtSoRKP8o/z5MMD4dyGiQ
+            P82Le8iDQ4x5FkQwfqFD3a/pTegoMfLWEfPrI+sYSaf+KFdtAUewBWkdTItkFmIO
+            84cil0INjILs1k/4l3mib52U8GIAxTT2YnOfhiJHwxzW+NYsTxMZE1kC5yU1HJIe
+            XNYWwx0SSo44nYxcFGbHbEze1/4VNEVxhAW2GXerlKBhpRgyoIWKbfoMfTRZFIHS
+            XAF9lFofpMqR4S6c000F7xPZwar5HuZihfbubpYOVcCn8ms3Y0EOJuSPAZ7/9eSq
+            6kVEXk+6XIyhKUhWE9Xji5fA+ZxBi+n58C71FkGWSzfy+Udn3IBVJpG1FQ11
+            =3RnM
+            -----END PGP MESSAGE-----
+          fp: CD8CE78CB0B3BDD4
+    unencrypted_suffix: _unencrypted
+    version: 3.10.2